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Exercise Booklet 3 


1 Euclid’s algorithm 
and congruences 


Exercise 1 


For each of the following numbers a and n, 
find the quotient and remainder when you 

divide a by n, and write down the equation 
a=qn+r. 


Exercise 2 


(a) Use Euclid’s algorithm to find the highest 
common factor d of 116 and 62, and then 
find integers v and w such that 
116v + 62w = d. 


(b) Use Euclid’s algorithm to find the highest 
common factor d of 117 and 28, and then 
find integers v and w such that 
117v + 28w = d. 


(c) Use Euclid’s algorithm to find the highest 
common factor d of —203 and 56, and 
then find integers v and w such that 
—203v + 56w = d. 


Exercise 3 

Which of the following congruences are true? 
(a) 26 = 80 (mod 9) 

(b) 14 = —65 (mod 9) 

(c) 341 = 254 (mod 9) 

(d) —114 = —285 (mod 9) 


2 Modular arithmetic 


Exercise 4 


Find the least residues of the following 
integers modulo 12. 


(a) 19+27 (b) 8132 — 7968 
(c) 19x27 (d) (—63) x 47 
(7 (i) 6" 


Exercise 5 


Find the least residues of the following 
integers modulo 7. 


(a) 19-27 (b) 81+79 

(e) 19x27 (d) (—21) x 43 

(e) 700003 x 490018 

(f) 35 (g) 36 (b) 21° 

(i) (3) G) 45 (k) 2311 


Exercise 6 


Find the least residues of the following 
integers modulo 11. 


(a) 19 — 27 (b) 81479 
(c) 19 x 27 (da) (—21) x 43 
(e) 555526 x 333317 

(£) 4 (œ): 121 (h) 8t 
(i) 50° (j) (—84)?04 


Exercise 7 


Determine which of the numbers in parts 
(a)-(e) are divisible by 3 and which by 9, by 
finding their digit sums. For the number in 
part (f), use another method to determine 
whether it is divisible by 3 and by 9 


(a) 792 (b) 865 
(c) 2751 (d) —7349 
(e) 14777415825 (£) 301% 


Exercise 8 


Do the following 10-digit codes satisfy the 
ISBN congruence check? 


(a) 175428953X 
(b) 0845387073 


3 Multiplicative 
inverses and linear 
congruences 


Exercise 9 


For each of the following values of a and n, 
determine whether a multiplicative inverse of 
a modulo n exists and, if it does, find one. 


p) a= 26, m= T3 
c) a= 56. M= 90 
d) a = 19, n = 54 
a = 15, n = 72 
a = 23, n= 68 


Exercise 10 


Decide which of the following linear 
congruences have a solution. Solve those that 
do have a solution. 


(a) 32 =7 (mod 11) 
b) 6x = 7 (mod 9) 
c) 12x = —20 (mod 32) 
d) 77x = —20 (mod 12) 
36x = 18 (mod 28) 
72x = 20 (mod 186) 
g) 29x = 40 (mod 62) 

) 231x = 357 (mod 728) 


3 Multiplicative inverses and linear congruences 


Exercise 11 


Suppose that you receive the enciphered 
message 20,12,15,10 that has been 
enciphered using the affine cipher 


E(x) = 21x + 4 (mod 26). 


What does the message say? (The conversion 
table for numbers and letters is shown in 
Table 1 on page 179 of Book A.) 


Exercise 12 For fun! 


Suppose that you receive a long message that 
you suspect has been enciphered using an 
affine cipher. You observe that the integers 7 
and 8 appear only once each in the message. 
You investigate tables giving the relative 
frequencies of letters in the English language 
and find that the least frequent letters are Q 
and Z. So you will work out which affine 
ciphers encipher one of Q and Z as 7 and the 
other as 8. 


(a) Find the affine cipher 
E(x) = ax +b (mod 26) 


that enciphers Q as 7 and Z as 8. (You 
will have to solve some simultaneous 
congruences in a and 0!) 

(b) Find the affine cipher that enciphers Q 
as 8 and Z as 7. 

(c) The final nine integers in the long 
message are 


14,22, 12, 14, 14, 21, 1, 10, 18. 
Which of the affine ciphers found in 


parts (a) and (b) might be the likeliest to 
have been used? 
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Solutions to exercises 


Solution to Exercise 1 


(a) The quotient is q = 4 and the remainder 
isr= 7. 


So the equation a = qn + r is 
39 =4x 8+7. 
b) ¢=8 r = 6, so 94 = 8 x 11 + 6. 
c) q = —16, r = 0, so —128 = —16 x 8 + 0. 
d) q = 4, r = 3, so 79 = 4 x 19+ 3. 
e) q= —7, r = 7, so —112 = —7 x 17 +7. 


Solution to Exercise 2 
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(a) Euclid’s algorithm gives 
116 = 1 x 624 54 


62 = 1 x 54+ 8 
54=6x8+6 
8=1x6+2 
6=3x2+0. 


So the highest common factor of 116 and 
62 is 2. Rearranging the equations gives 
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Backwards substitution gives 


-(@-6~x®) 


: 
© 


-1«@-@ 
=7x (@)-1« 6D) -6D 


= 7 x (62)—8 x (4) 
=7 x 62)—8 x (9-1 x 6D) 
= 15 x (62) — 8 x 16. 


So 116 x (—8) + 62 x 15 = 2. This is the 
equation 116v + 62w = d with v = —8 
and w = 15. 


(Check: 
116 x (—8) + 62 x 15 = —928 + 930 = 2.) 


(b) (For this and subsequent exercises of this 
sort, we shall not include the lines giving 
rearrangements of the equations given by 


each step of Euclid’s algorithm, as in the 
solution above, but will simply (and 
bravely!) use these rearrangements when 
writing down the backwards substitution 
steps. There is, of course, nothing wrong 
with including these extra lines in your 
work if you prefer to do this.) 


Euclid’s algorithm gives 


117 =4x28 +5 


28=5x5d+3 
5=1x342 
3=1x24+1 
2=2x1+0. 


So the highest common factor of 117 and 
28 is 1. 


Backwards substitution gives 
=3-2 
= 3- (5-3) 
=2x3-5 
= 2(28-5x5)—5 
=2~x28-11x5 
= 2 x 28 — 11(117 — 4 x 28) 
= 46 x 28 — 11 x 117. 
So 117 x (—11) + 46 x 28 = 1. This is the 


equation 117v + 28w = d with v = —11 
and w = 46. 


(Check: 117 x (—11) + 46 x 28 = 
—1287 + 1288 = 1.) 
Euclid’s algorithm gives 
203 = 3 x 564 35 
56 = 1 x 35 + 21 
35 =1 x21 +14 
21=1x14+7 
14=2x7+0. 
So the highest common factor of 203 and 


56 is 7, and hence the highest common 
factor of —203 and 56 is also 7. 


Backwards substitution gives 
7=21-14 
= 21 — (35 — 21) 
= 2x 21 — 35 
= 2(56 — 35) — 35 
=2x 56—3x 35 
= 2 x 56 — 3(203 — 3 x 56) 
= 11 x 56 — 3 x 208. 


So 203 x (—3) + 56 x 11 = 7, and hence 
—203 x 3+ 56 x 11=7. 

This is the equation —203v + 56w = d 

with v = 3 and w = 11. 


(Check: 
—203 x 3+ 56 x 11 = —609 + 616 = 7.) 


Solution to Exercise 3 


(a) True: 26 and 80 each have remainder 8 
on division by 9; alternatively, 
26 — 80 = —54 is divisible by 9. 


(b) False: 14 has remainder 5 on division 
by 9, and —65 has remainder 7 on 
division by 9; alternatively, 

14 — (—65) = 79 is not divisible by 9. 

(c) False: 341 has remainder 8 on division 
by 9, and 254 has remainder 2 on division 
by 9; alternatively, 341 — 254 = 87 is not 
divisible by 9. 

(d) True: —114 and —285 each have 
remainder 3 on division by 9; 
alternatively, —114 — (—285) = 171 is 
divisible by 9. 


Solution to Exercise 4 
(a) 19+ 27 = 46 = 10 (mod 12). 
So the least residue is 10. 


(The statement ‘So the least residue 
is...’ is omitted in solutions to 
subsequent parts of this exercise. We 
follow a similar convention in later 
exercises. ) 


b) 8132 — 7968 = 164 = 8 (mod 12) 
c) 19x 27=7x3=21=9 (mod 12) 
d) (—63) x 47 = (—3) x (—1) = 3 (mod 12) 


e) Since 7? = 49 = 1 (mod 12), it follows 
that 


7? = (P) x7 =1fx7= 7 (mod 12). 


(f) Since 6? = 36 = 0 (mod 12), it follows 
that 


6" = 6? x6" = 0 x 6^ = 0 (mod 12). 


Solutions to exercises 


Solution to Exercise 5 

(a) 19 — 27 = —8 = 6 (mod 7) 

(b) 81 +79=4+2 = 6 (mod 7) 

(c) 19 x 27 = 5 x (—1) = —5 = 2 (mod 7) 
( 

( 


d) (—21) x 43 = 0 x 43 = 0 (mod 7) 

e) 700003 x 490018 = 3 x 18 
=3x4=12=5 (mod 7) 

5 = (37)? x 3=9? x 3=2? x3 

= 12=5 (mod 7) 


n 
eR 
" 
ww 


(g) By Fermat’s little theorem, 
3° = 1 (mod 7). 
(h) 219 = 0° = 0 (mod 7) 
(i) By Fermat’s little theorem, 
(—3)Ê = 1 (mod 7). 
Since 15 = 2 x 6 + 3, 
(—3)" = ((—3)°)? {8 
= 1? x (-3)? 
= —27 
= 1 (mod 7). 
(j) Since 41 = —1 (mod 7), 
41153 = (—1)!53 = = 1 = 6 (mod 7). 
(k) First, 23 = 2 (mod 7), so 
23115 = 2115 (mod 7). 
By Fermat’s little theorem, 
2° = 1 (mod 7). 

Since 115 = 19x 6+1, 
2115 = (26)19 x 91 
=1%x2 
=1x2 

= 2 (mod 7). 


Solution to Exercise 6 

(a) 19 — 27 = —8 = 3 (mod 11) 

(b) 81+ 79 =4+2=6 (mod 11) 

(c) 19 x 27 = (-3) x 5 = —15 = 7 (mod 11) 
(da) (—21) x 43 = 1 x (-1) 

= —1 = 10 (mod 11) 
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(e) 555526 x 333317 = 26 x 17 
=4x6 
= 24 = 2 (mod 11) 
(£) 4° = (4°)? = 64° = (-2)° 
= —8 = 3 (mod 11) 
12110 = 01° = 0 (mod 11) 
By Fermat’s little theorem, 
8'° = 1 (mod 11), 
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so 
gt =80 x8 
=1x8 
= 8 (mod 11). 
(i) First, 50 = 6 (mod 11), so 
507° = 676 (mod 11). 
By Fermat’s little theorem, 
6'° = 1 (mod 11). 
Since 26 = 2 x 104+ 6, 


= 5 (mod 11). 
(j) First, —84 = 4 (mod 11), so 
(—84)204 = 4204 (mod 11). 
By Fermat’s little theorem, 
4"? = 1 (mod 11). 
Since 204 = 20 x 10+ 4, 


4204 = aye x 44 


Solution to Exercise 7 


(a) 


(b) 


(f) 


The digit sum of 792 is 7 +9 +2 = 18. 
This is divisible by 3 and 9, so 792 is 
divisible by both 3 and 9. 


The digit sum of 865 is 8 +6 +5 = 19. 
This is not divisible by 3 or 9, so 865 is 
not divisible by 3 or 9. 


The digit sum of 2751 is 
2+7+5+1=15. 


This is divisible by 3 but not by 9, so 
2751 is divisible by 3 but not by 9. 


The digit sum of —7349 is 
7+34+4+4+9 = 28. 


This is not divisible by 3 or 9, so —7349 

is not divisible by 3 or 9. 

The digit sum of 14777 415 825 is 
14+44+74+7+7+4+41 
+5+8+2+5= 5l. 

The digit sum of 51 is 5+1 = 6. This is 

divisible by 3 but not by 9, so 51 is 

divisible by 3 but not by 9, and hence 

14777 415 825 is divisible by 3 but not 

by 9. 


Note that 
3010° = 30? x 3098 = 900 x 30°85, 
which is divisible by 3 and 9. 


Solution to Exercise 8 


(a) 


10+2-34+3-54+4-94+5-8 
+6:-2+7-44+8-54+9-7+10-1 


= 10 + 6 + 15 + 36 + 40 + 12+ 28+ 40 + 63 + 10 


=10+6+4+3+7+1+6+7+8+10 
= 62 

Æ 0 (mod 11). 

So 175428953X does not satisfy the ISBN 
congruence check. 
3+2-74+3-044-74+5-8 
+6:34+7-54+8-44+9-8410-0 


=34+144+0+4 28+ 40+ 184 35+ 32+ 72+0 


=3434+046+7+74+2+(-1)+6+0 
= 33 
= 0 (mod 11). 


So 0845387073 satisfies the ISBN 
congruence check. 


Solution to Exercise 9 


(a) 


The integers 7 and 13 are coprime, so 
there is a multiplicative inverse of 7 
modulo 13. Trying the values 2,3,4,... 
one by one, we find immediately that 


2x 7=14=1 (mod 13), 


so 2 is a multiplicative inverse of 7 
modulo 13. 


The integers 26 and 13 are not coprime 
(since both are divisible by 13), so there 
is no multiplicative inverse of 26 
modulo 13. 


The integers 56 and 55 are coprime, so 
there is a multiplicative inverse of 56 
modulo 55. Since 56 = 1 (mod 55), it 
follows that 


1 x 56=1x1=1 (mod 55). 


Therefore 1 is a multiplicative inverse 
of 56 modulo 55. 


The integers 19 and 54 are coprime, so 
there is a multiplicative inverse of 19 
modulo 54. 


Euclid’s algorithm gives 


54=2x 19+ 16 


19=1x16+3 
146=5x341 
3=3x1+0. 


The remainder 1 confirms that 19 and 54 
are coprime. 


Backwards substitution gives 


1=16-5~x83 
= 16 — 5 x (19 — 16) 
=6x 16—5~x 19 


= 6 x (54— 2 x 19)— 5 x 19 
= 6 x 54 — 17 x 19. 


(Check: 
6 x 54 — 17 x 19 = 324 — 323 = 1.) 


Hence 
(—17) x 19 = 1 (mod 54), 


so —17 is a multiplicative inverse of 19 
modulo 54. 


Since 
—17 = 37 (mod 54), 


37 is also a multiplicative inverse of 19 
modulo 54. 


(e) 


(£) 


Solutions to exercises 


The integers 15 and 72 are not coprime 
(since both are divisible by 3), so there is 
no multiplicative inverse of 15 modulo 72. 


The integers 23 and 68 are coprime, so 
there is a multiplicative inverse of 23 
modulo 68. Trying the values 2,3,4,... 
one by one, we find that 


3 x 23 = 69 = 1 (mod 68), 


so 3 is a multiplicative inverse of 23 
modulo 68. 


Euclid’s algorithm gives 
521 = 3 x 147+ 80 
147 = 1 x 80+ 67 

80 = 1 x 67+ 13 


67=5x 13+2 
13=6x2+1 
2=2x1+0. 


A remainder 1 is obtained, so 147 and 
521 are coprime, and hence 147 has a 
multiplicative inverse modulo 521. 


Backwards substitution gives 
1=13-6x2 
= 13-6 x (67 — 5 x 13) 
= 31 x 13 — 6 x 67 
= 31 x (80 — 67) — 6 x 67 
= 31 x 80 — 37 x 67 
= 31 x 80 — 37 x (147 — 80) 
= 68 x 80 — 37 x 147 
= 68 x (521 — 3 x 147) — 37 x 147 
= 68 x 521 — 241 x 147. 


(Check: 68 x 521 — 241 x 147 
= 35 428 — 35 427 = 1.) 


Hence 
(—241) x 147 = 1 (mod 521), 


so —241 is a multiplicative inverse of 147 
modulo 521. 


Since 
—241 = 280 (mod 521), 


280 is also a multiplicative inverse of 147 
modulo 521. 
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Solution to Exercise 10 


(a) 


As 3 and 11 are coprime, the linear 
congruence has solutions. Trying the 
values 1,2,3,... one by one, we find that 


3 x 6 =18=7 (mod 11), 
so the solutions are given by 
x = 6 (mod 11). 


Alternatively, it is easy to see that 4 is a 
multiplicative inverse of 3 modulo 11, 
since 


4x 3=12=1 (mod 11), 
so the solutions are given by 


g=7x4=28=6 (mod 11). 


The highest common factor of 6 and 9 
is 3. Since 7 is not divisible by 3, the 
linear congruence has no solutions. 


The highest common factor of 12 and 32 
is 4. Since —20 is also divisible by 4, the 
linear congruence can be solved and is 
equivalent to 


3x2 = —5 (mod 8). 
Noting that 
—5 = 3 (mod 8), 
we see that the solutions are given by 
x =1 (mod 8). 
Since 
77 =5 (mod 12) and 
the linear congruence is equivalent to 
5x = 4 (mod 12). 


As 5 and 12 are coprime, the linear 
congruence has solutions. Trying the 
values 1, 2,3,... one by one, we find that 


5 x 8 = 40 = 4 (mod 12), 
so the solutions are given by 
x = 8 (mod 12). 


Alternatively, it is easy to see that 5 is a 
multiplicative inverse of 5 modulo 12, 
since 


5 x 5 = 25 = 1 (mod 12), 
so the solutions are given by 


x = 4x 5 = 20 = 8 (mod 12). 


—20 = 4 (mod 12), 


(e) 


(£) 


The highest common factor of 36 and 28 
is 4. Since 18 is not divisible by 4, the 
linear congruence has no solutions. 


As the numbers involved are quite large, 
we might need to find the highest 
common factor of 72 and 186 to help us 
to decide whether the linear congruence 
has solutions. We can do this either by 
applying Euclid’s algorithm or by 
expressing each number as a product of 
prime factors. As the numbers are not 
that large, we take the latter approach: 
72 = 23 x 3? and 186 = 2 x 3 x 31, so the 
highest common factor is 2 x 3 = 6. Since 
20 is not divisible by 6, the linear 
congruence has no solutions. (Note that 
for large numbers it is usually far more 
efficient to compute their highest 
common factor using Euclid’s algorithm 
than to express each as a product of 
prime factors.) 


As 29 and 62 are coprime, the linear 
congruence has solutions. (Note that 29 
is prime and does not divide 62, hence 
they are coprime. If you didn’t spot this, 
then you should have found their highest 
common factor using Euclid’s algorithm. 
As they are coprime, this won’t be 
wasted effort as the computation will 
then help you to find a multiplicative 
inverse of 29 modulo 62 — a multiplicative 
inverse may not be immediately obvious 
by trying a few small numbers!) 


Euclid’s algorithm gives 


62 = 2 x 29+4 
29=7x4+1 
4=4x1-+0. 


This confirms that 29 and 62 are coprime. 
Backwards substitution gives 
1=29-7xA4 
= 29 — 7(62 — 2 x 29) 
= 15 x 29 — 7 x 62. 
So 
15 x 29 = 1 (mod 62), 


and hence 15 is a multiplicative inverse of 
29 modulo 62. So the solutions are given 
by 


x = 40 x 15 = 42 (mod 62). 
(Check: 29 x 42 = 1218 = 40 (mod 62).) 


(h) Euclid’s algorithm gives 
728 = 3 x 231 + 35 
231 = 6 x 354 21 
35=1x 21414 
21=1x14+7 
14=2x7+0. 
So the highest common factor of 231 and 
728 is 7. Since 357 is divisible by 7, the 


linear congruence has solutions and is 
equivalent to 


33x = 51 (mod 104). 


As 33 and 104 are coprime, we can use 
the method involving Euclid’s algorithm 
and backwards substitution to find a 
multiplicative inverse of 33 modulo 104 
and then solve the linear congruence. 
Euclid’s algorithm gives 


104 = 3 x 33 +5 


33 =6x5+3 
5=1x3+2 
3=1x2+1 
2=2x1+0. 


(Note that this corresponds to the 
previous set of equations where (the 
correct!) terms are divided by 7.) 


Backwards substitution gives 
1=3-2 
=3-(5-1x 83) 
=2x3-5 
= 2(33-—6x 5)—5 
=2 x 33-135 
= 2 x 33 — 13 x (104 — 3 x 33) 
= 41 x 33 — 13 x 104. 
So 
41 x 33 = 1 (mod 104), 


and hence 41 is a multiplicative inverse of 
33 modulo 104. So the solutions are given 
by 


x = 51 x 41 = 11 (mod 104). 
(Check: 33 x 11 = 363 = 51 (mod 104).) 


Solutions to exercises 


Solution to Exercise 11 


A rule D for deciphering the message is given 
by 


D(y) = v(y — 4) (mod 26), 


where v is a multiplicative inverse of 21 
modulo 26. 


Since 
21 = —5 (mod 26) 
and 
(—5) x 5 = —25 = 1 (mod 26), 


we see that 5 is a multiplicative inverse of 21 
modulo 26. So 


D(y) = 5(y — 4) (mod 26). 


Hence 
D(20) = 5(20 — 4) = 80 = 2 (mod 26), 
D(12) = 5(12 — 4) = 40 = 14 (mod 26), 
D(15) = 5(15 — 4) = 55 = 3 (mod 26), 
D(10) = 5(10 — 4) = 30 = 4 (mod 26). 


So the deciphered message is 
2, 14, 3, 4, 

which, by Table 1, says 
CODE. 


Solution to Exercise 12 


(a) The letters Q and Z correspond to the 
numbers 16 and 25, respectively. So the 
affine cipher E(x) = ax +b (mod 26) 
that enciphers Q as 7 and Z as 8 requires 
the values of a,b to satisfy simultaneously 
the pair of congruences 

16a +b = 7 (mod 26), 

25a + b = 8 (mod 26). 
Subtracting the first congruence from the 
second (to eliminate b) gives 


9a = 1 (mod 26). 


Then a is a multiplicative inverse of 9 
modulo 26, so we can take a = 3. 
Substituting this value into the first of 
the congruences gives 


16 x 3 +b = 7 (mod 26), 
so 


b = 7 — 48 = —41 = 11 (mod 26). 
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Thus the affine cipher is 
E(x) = 3x + 11 (mod 26). 


(b) The affine cipher E(x) = ax +b (mod 26) 
that enciphers Q as 8 and Z as 7 requires 
the values of a,b to satisfy simultaneously 
the pair of congruences 


16a + b = 8 (mod 26), 
25a +b = 7 (mod 26). 


Subtracting the first congruence from the 
second (to eliminate b) gives 


9a = —1 (mod 26). 


As a multiplicative inverse of 9 
modulo 26 is 3, the solutions of this linear 
congruence are given by 


a = (—1) x 3 = —3 (mod 26). 


Substituting this value into the first of 
the congruences gives 


16 x (—3) + b= 8 (mod 26), 
so 

b= 8 + 48 = 56 = 4 (mod 26). 
Thus the affine cipher is 

E(x) = —3x + 4 (mod 26). 


(c) As 9 is a multiplicative inverse of 3 
modulo 26, the deciphering rule D 
corresponding to the rule in part (a), that 
is, E(x) = 3x +11 (mod 26), is given by 


D(y) = 9(y — 11) (mod 26). 


Hence 

D(14) = 9(14 — 11) = 27 = 1 (mod 26), 
D(22) = 9(22 — 11) = 99 = 21 (mod 26), 
D(12) = 9(12 — 11) = 9 (mod 26), 

D(21) = 9(21 — 11) = 90 = 12 (mod 26), 
D(1) = 9(1 — 11) = —90 = 14 (mod 26), 
D(10) = 9(10 — 11) = -9 = 17 (mod 26), 
D(18) = 9(18 — 11) = 63 = 11 (mod 26). 


With this deciphering rule, the 
deciphered message would be 


1,21,9,1, 1,12, 14,17,11, 
which, by Table 1, would say 
BVJBBMORL. 


As —9 is a multiplicative inverse of —3 
modulo 26, the deciphering rule D 
corresponding to the rule in part (b), that 
is, E(x) = —3x + 4 (mod 26), is given by 


D(y) = —9(y — 4) (mod 26). 


D(14) = —9(14 — 4) = —90 = 14 (mod 26), 


) ( 
D(22) = —9(22 — 4) = —162 = 20 (mod 26), 
D(12) = —9(12 — 4) = —72 = 6 (mod 26), 
D(21) = —9(21 — 4) = —153 = 3 (mod 26), 
D(1) = —9(1 — 4) = 27 = 1 (mod 26), 
D(10) = —9(10 — 4) = —54 = 24 (mod 26), 


D(18) = —9(18 — 4) = —126 = 4 (mod 26). 


With this deciphering rule, the 
deciphered message would be 


14, 20, 6, 14, 14, 3, 1, 24, 4, 
which, by Table 1, would say 
OUGOODBYE. 


The second rule might well be the 
likeliest to have been used! 


